Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: khGdmeLtOk6+QDNLfDiWzRPvpuBJGNtM5qeUKp7qPsI=
Subject key identifier: 34:05:B7:80:A2:25:D2:53:EE:A6:AC:8F:0E:EF:26:8F:4C:CE:38:28
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01A17A71F126B5080DB52E72BA9739F503E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 14C8
Signing time: Mon 26 Oct 2026 23:00:49 +0000
Manifest this update: Mon 26 Oct 2026 23:00:49 +0000
Manifest next update: Tue 27 Oct 2026 23:00:49 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: JHDS9VpRa2Z2ruTNcZ/a9o35t8+kO2REcsNdeYm8Q+c=)
2: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
3: zaVYapWVUgBMhU_JcYYvFP47i24.asa (hash: 8XrhcCbLyvo7InAuEJRmE6i6/OkGN5+Zgg9NXl4qux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:f1:26:b5:08:0d:b5:2e:72:ba:97:39:f5:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Oct 26 23:00:49 2026 GMT
Not After : Oct 27 23:00:49 2026 GMT
Subject: CN=3405b780a225d253eea6ac8f0eef268f4cce3828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:81:dc:62:74:eb:29:0d:32:30:8f:2e:b2:
6d:ac:aa:17:12:f8:08:62:16:21:b4:29:8b:90:71:
76:a9:4d:e7:24:b1:52:71:81:48:f4:5c:d2:b4:79:
29:b4:4e:7a:79:60:4c:b1:9b:58:83:43:e9:f9:66:
da:14:fc:c3:fd:89:2f:50:8a:62:40:9f:53:50:c5:
e4:ba:48:80:ce:b5:16:5d:e5:e9:74:d8:25:70:b6:
34:7d:f0:32:ac:0f:bc:f3:29:bc:a2:89:45:ca:f3:
09:a3:f8:f8:5b:ec:d1:73:c8:7d:c2:ca:d0:6d:e7:
84:23:79:36:bb:db:1f:35:db:1c:d8:bf:1c:20:22:
09:4b:dc:d2:49:23:ef:1a:fa:51:d2:6f:33:48:23:
ce:44:73:f8:05:35:88:04:08:7f:25:8b:df:58:80:
8a:05:90:4f:12:6e:77:ea:54:b8:a3:14:b2:54:2f:
46:4a:5f:1c:45:26:a4:1c:b2:b7:06:e7:3a:a7:a8:
66:d5:f2:37:bc:53:86:d8:9e:de:ba:6e:1d:4c:98:
cc:09:49:89:e6:7b:13:dd:e8:58:bf:27:0f:a4:a3:
cb:59:00:d9:34:4b:42:1c:ff:99:3d:9d:2a:51:73:
8f:54:42:be:40:3b:c3:9d:af:0b:c9:d3:77:f8:e2:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:B7:80:A2:25:D2:53:EE:A6:AC:8F:0E:EF:26:8F:4C:CE:38:28
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:54:ce:ee:33:91:49:49:99:f3:4c:65:86:11:40:fa:d3:
ac:6f:8b:dd:c9:55:30:e1:b0:b4:a9:c5:44:19:2f:c0:8a:f4:
74:2c:9b:58:06:e6:89:64:5d:84:01:14:be:d3:64:ae:6f:18:
f3:cc:cb:d7:07:62:34:a5:cf:3d:98:78:cc:93:02:6c:92:cf:
24:ce:10:39:b5:d2:61:56:53:47:38:46:68:87:d3:d1:52:f9:
99:28:ba:80:63:fa:d1:c0:6a:d8:d5:e8:4e:fd:db:64:a9:9e:
48:c8:a4:9c:d2:5f:86:3f:7b:a2:74:31:c7:87:d3:45:45:6c:
a4:ff:68:a3:eb:34:f3:92:33:dd:1c:ed:82:a9:ef:20:65:cd:
f1:7a:93:a5:74:13:32:00:49:af:f0:ec:ba:57:6a:a2:90:e4:
c8:54:8d:c1:35:a7:fd:6a:bb:1a:72:d2:98:6c:71:cb:07:17:
c7:1b:98:0d:f5:5e:08:73:14:9f:01:57:af:f1:af:76:b3:12:
5f:91:08:9d:03:32:24:51:98:24:55:eb:ea:7d:f7:06:11:86:
e7:d7:b7:37:03:02:a5:9e:cf:97:6a:b5:5b:e3:9d:47:db:4a:
f7:fb:64:c5:70:dc:6f:87:b4:52:40:9e:50:c0:93:78:ec:02:
37:6f:85:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cfEmtQgNtS5yupc59QPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk
MGM5ODMwHhcNMjYxMDI2MjMwMDQ5WhcNMjYxMDI3MjMwMDQ5WjAzMTEwLwYDVQQD
EygzNDA1Yjc4MGEyMjVkMjUzZWVhNmFjOGYwZWVmMjY4ZjRjY2UzODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5CB3GJ06ykNMjCPLrJtrKoXEvgI
YhYhtCmLkHF2qU3nJLFScYFI9FzStHkptE56eWBMsZtYg0Pp+WbaFPzD/YkvUIpi
QJ9TUMXkukiAzrUWXeXpdNglcLY0ffAyrA+88ym8oolFyvMJo/j4W+zRc8h9wsrQ
beeEI3k2u9sfNdsc2L8cICIJS9zSSSPvGvpR0m8zSCPORHP4BTWIBAh/JYvfWICK
BZBPEm536lS4oxSyVC9GSl8cRSakHLK3Buc6p6hm1fI3vFOG2J7eum4dTJjMCUmJ
5nsT3ehYvycPpKPLWQDZNEtCHP+ZPZ0qUXOPVEK+QDvDna8LydN3+OKq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQFt4CiJdJT7qasjw7vJo9MzjgoMB8GA1UdIwQY
MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt
ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl
LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARARUzu4z
kUlJmfNMZYYRQPrTrG+L3clVMOGwtKnFRBkvwIr0dCybWAbmiWRdhAEUvtNkrm8Y
88zL1wdiNKXPPZh4zJMCbJLPJM4QObXSYVZTRzhGaIfT0VL5mSi6gGP60cBq2NXo
Tv3bZKmeSMiknNJfhj97onQxx4fTRUVspP9oo+s085Iz3RztgqnvIGXN8XqTpXQT
MgBJr/DsuldqopDkyFSNwTWn/Wq7GnLSmGxxywcXxxuYDfVeCHMUnwFXr/GvdrMS
X5EInQMyJFGYJFXr6n33BhGG59e3NwMCpZ7Pl2q1W+OdR9tK9/tkxXDcb4e0UkCe
UMCTeOwCN2+FsA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:13:16 2026 by rpki-client